Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/3iX4CzsowfzaDuMYiTgmw5F7AWc.roa
File: 3iX4CzsowfzaDuMYiTgmw5F7AWc.roa (raw, json)
Hash identifier: ZGa57IOt6FT71fStqzbEDcDnqkmd2ExUwYWIciFLgdA=
Subject key identifier: DE:25:F8:0B:3B:28:C1:FC:DA:0E:E3:18:89:38:26:C3:91:7B:01:67
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 01856FF94293B08D3B9C2DDC5A1D104A12A4
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/3iX4CzsowfzaDuMYiTgmw5F7AWc.roa
Signing time: Mon 02 Jan 2023 00:54:44 +0000
ROA not before: Mon 02 Jan 2023 00:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43366
IP address blocks: 195.28.22.0/23 maxlen: 24
185.159.136.0/22 maxlen: 24
2a07:b440::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:42:93:b0:8d:3b:9c:2d:dc:5a:1d:10:4a:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Jan 2 00:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de25f80b3b28c1fcda0ee318893826c3917b0167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:18:a6:6a:3e:44:02:e7:17:dd:59:ee:63:
70:57:b4:03:9d:a2:98:14:25:3c:cb:a6:78:89:0c:
b0:45:df:34:45:65:9b:5c:a8:27:69:3e:40:9a:62:
79:17:78:88:c5:86:49:6a:0d:10:70:e7:31:c8:ff:
4d:99:e5:2c:83:b0:bf:59:56:79:b2:76:64:13:be:
3f:66:89:ad:ff:6c:f8:d4:43:19:2e:27:1d:58:b3:
ec:a7:0e:3d:0a:f9:4b:7d:8d:34:b8:d4:10:2a:69:
7e:05:31:1e:01:21:cc:01:e8:0c:2c:2b:f1:3f:f9:
f1:a3:9a:63:6a:b9:53:5f:2f:cd:be:ac:0a:17:5d:
f7:80:44:4f:58:7a:8e:4b:0e:1b:4a:2b:66:12:88:
bc:46:de:9a:34:82:e1:64:44:0c:3f:7c:aa:2e:10:
63:3d:62:6a:5a:35:ec:14:b3:91:19:de:52:44:bd:
1e:55:67:da:81:5e:3d:87:b3:6e:c1:1c:cf:2d:9f:
a5:6f:78:c1:0f:b9:03:35:9a:e7:ae:a7:84:2e:7c:
d2:50:d6:61:c1:a8:ac:e1:7e:60:be:5c:a3:e8:85:
56:47:05:5f:45:df:f8:ca:1e:35:9d:3d:66:1d:a3:
d4:b9:76:49:2d:55:a6:d5:66:5e:b2:7f:39:c7:8a:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:25:F8:0B:3B:28:C1:FC:DA:0E:E3:18:89:38:26:C3:91:7B:01:67
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/3iX4CzsowfzaDuMYiTgmw5F7AWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.136.0/22
195.28.22.0/23
IPv6:
2a07:b440::/29
Signature Algorithm: sha256WithRSAEncryption
94:c0:e6:00:f2:eb:dd:7d:48:6d:66:05:93:40:7e:c7:a2:fa:
ab:58:8a:b2:bc:42:41:3e:a6:47:53:64:db:24:23:ab:be:6d:
8a:d8:71:94:e0:3b:b4:de:fd:57:b4:63:fa:e5:29:a0:ba:36:
b5:b4:fc:0d:85:fe:6d:2e:9a:0d:4d:fb:6d:bb:eb:c3:ec:e6:
03:03:00:5a:26:38:64:ef:65:86:ac:0e:fa:1e:76:0b:bd:0e:
c9:91:c4:5a:5e:f9:91:8b:1e:b6:b2:3a:da:7f:86:d4:bf:ef:
64:a4:5b:5b:10:2c:38:06:76:92:b8:44:e4:8e:09:a3:5c:7e:
be:07:cf:86:ae:4f:cc:c1:1b:c7:a4:a2:79:2e:db:b7:c5:cb:
4b:cc:57:d1:1b:12:56:fb:83:be:a6:ee:9e:25:06:a6:3c:74:
c9:9b:40:07:66:4e:7b:c2:e6:2e:92:fc:46:f0:6d:c8:e8:15:
fd:79:fd:89:e8:20:f8:11:93:22:ce:4c:7c:d1:9a:bc:81:2b:
60:5c:05:ac:0d:03:e9:d1:df:67:ef:da:33:93:64:e3:69:2e:
07:9d:fa:2a:e9:be:54:20:b4:8f:c5:b9:52:ac:fa:75:f4:24:
5e:5b:8d:09:cf:91:c0:a9:53:96:a3:dd:79:da:89:b5:2d:66:
1b:87:8a:a8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVv+UKTsI07nC3cWh0QShKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTlkYjdmMmMyZTNiM2FiZDhiZjQxNWYwY2UxZmZmMzM0
MzI5ZWMwHhcNMjMwMTAyMDA1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTI1ZjgwYjNiMjhjMWZjZGEwZWUzMTg4OTM4MjZjMzkxN2IwMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCEYpmo+RALnF91Z7mNwV7QDnaKY
FCU8y6Z4iQywRd80RWWbXKgnaT5AmmJ5F3iIxYZJag0QcOcxyP9NmeUsg7C/WVZ5
snZkE74/Zomt/2z41EMZLicdWLPspw49CvlLfY00uNQQKml+BTEeASHMAegMLCvx
P/nxo5pjarlTXy/NvqwKF133gERPWHqOSw4bSitmEoi8Rt6aNILhZEQMP3yqLhBj
PWJqWjXsFLORGd5SRL0eVWfagV49h7NuwRzPLZ+lb3jBD7kDNZrnrqeELnzSUNZh
wais4X5gvlyj6IVWRwVfRd/4yh41nT1mHaPUuXZJLVWm1WZesn85x4oY3wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFN4l+As7KMH82g7jGIk4JsORewFnMB8GA1UdIwQY
MBaAFLhZ238sLjs6vYv0FfDOH/8zQynsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzIt
NGMxYzU3YTgxZmZkLzEvM2lYNEN6c293ZnphRHVNWWlUZ213NUY3QVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzItNGMxYzU3YTgxZmZk
LzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuZ+IAwQB
wxwWMA0EAgACMAcDBQMqB7RAMA0GCSqGSIb3DQEBCwUAA4IBAQCUwOYA8uvdfUht
ZgWTQH7HovqrWIqyvEJBPqZHU2TbJCOrvm2K2HGU4Du03v1XtGP65Smguja1tPwN
hf5tLpoNTfttu+vD7OYDAwBaJjhk72WGrA76HnYLvQ7JkcRaXvmRix62sjraf4bU
v+9kpFtbECw4BnaSuETkjgmjXH6+B8+Grk/MwRvHpKJ5Ltu3xctLzFfRGxJW+4O+
pu6eJQamPHTJm0AHZk57wuYukvxG8G3I6BX9ef2J6CD4EZMizkx80Zq8gStgXAWs
DQPp0d9n79ozk2TjaS4Hnfoq6b5UILSPxblSrPp19CReW40Jz5HAqVOWo9152om1
LWYbh4qo
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:49 2024 by rpki-client on console.sobornost.net